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If any issues arise that would cause delay in issuing this application, the Examiner is requested to 
contact the undersigned. 



The Commissioner is hereby authorized to charge any additional fees which may be required for this 
Amendment, or credit any overpayment to deposit account no. 08-0219. 

In the event that an extension of time is required, or which may be required in addition to that 
requested in a petition for an extension of time, the Commissioner is requested to grant a petition for that 
extension of time which is required to make this response timely and is hereby authorized to charge any fee 
for such an extension of time or credit any overpayment for an extension of time to deposit account no. 08- 
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0219. 



Respectfully submitted, 



HALE AND DORR LLP 





Gregory S. Disc her 
Registration No. 42,488 



Date: wv \ \s 
1455 Pennsylvania Avenue, N.W. 
Washington, DC 20004-1008 
(202) 942-8437 
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Appendix A 
(Marked-up Copy of page 1) 

On page 1 of the specification, please delete lines 8-14, and insert instead the following paragraph: 

This application is a Continuation-in-Part of [claims priority to] application serial number 
09/794,386, filed February 28, 2001, entitled "System, Method And Medium For Certifying And Accrediting 
Requirements Compliance", which in turn claims priority to application serial number 60/223,982, filed 
August 9, 2000, entitled "Web Certification and Accreditation System, Method and Medium", each of which 
is [are] assigned to the assignee of this application and incorporated herein by reference. 
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Appendix C 
(Marked up Copy of page 30) 



On page 30 of the specification, please delete lines 8-20, and insert instead the following paragraph: 

FIG. 23 shows an exemplary Threat Environment screen, which shows the calculated level of risk 
based on the information that was provided in step 100. As per at least some embodiments, the present 
invention automatically calculates the risk, which is indicated under the Calculated Value 2302 heading. This 
could be accomplished in any number of ways based upon data obtained during the current and/or testing 
phase, as indicated above. The User Defined Value [2234] 2304 preferably defaults to the corresponding 
Calculated Value 2302 for a given threat environment element (e.g., 1, 2, 3, etc.). However the user/analyst 
has the opportunity to optionally override the calculated risk rating by clicking on the User Defined Value 
[2204] 2304 for each corresponding threat element. As previously discussed, exemplary available choices are 
negligible, low, medium, or high, although they could also be, e.g., numerical in nature. 
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Appendix E 
(Marked up version of claim 83) 

83. (Amended). The system according to claim [83] 80 wherein said network discovery engine further 
collects information pertaining to at least one of application software, hard disk drive capacity, device 
manufacturer, and device model. 
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